# LDAP (Active Directory) improvements

**URL:** <https://community.open-emr.org/t/ldap-active-directory-improvements/13094>\
**Category:** OpenEMR Development\
**Created:** [November 2, 2019, 5:10pm UTC](https://community.open-emr.org/t/ldap-active-directory-improvements/13094 "2019-11-02T17:10:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![brady.miller](https://community.open-emr.org/user_avatar/community.open-emr.org/brady.miller/32/10178_2.png) [@brady.miller](https://community.open-emr.org/u/brady.miller)\
**Post date:** [November 2, 2019, 5:10pm UTC](https://community.open-emr.org/t/ldap-active-directory-improvements/13094/1 "2019-11-02T17:10:36Z")

</div>

Hi,

@sunsetsystems has recently brought in some nice ldap updates, which also have a easy way to test out. It will be in OpenEMR 5.0.3 release (which will go out in a couple months). Here is the PR that was brought in:  
[https://github.com/openemr/openemr/pull/2746](https://github.com/openemr/openemr/pull/2746)

Here is text taken from the PR regarding the update and easy way to test:

* * *

A benefit here is that you can exclude a list of users from LDAP authentication, making setup and troubleshooting easier.

Also note that you are to put “{login}” into the Distinguished Name field (in Globals) as a placeholder for the OpenEMR username.

For testing you can use the sample LDAP server described here:  
[http://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/](http://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/)  
Use these values in globals:  
LDAP - Server Name or URI : [ldap.forumsys.com](http://ldap.forumsys.com)  
LDAP - Distinguished Name of User : uid={login},dc=example,dc=com  
LDAP - Login Exclusions : administrator (or whatever your admin login is)

Then create a user named “tesla”.  
When you enable LDAP and log in as that user, the password is “password”.

* * *

Thanks you @sunsetsystems !

-brady

---

<div class="post-metadata">

**Author:** ![stephenwaite](https://community.open-emr.org/user_avatar/community.open-emr.org/stephenwaite/32/15754_2.png) [@stephenwaite](https://community.open-emr.org/u/stephenwaite)\
**Post date:** [June 27, 2022, 4:26pm UTC](https://community.open-emr.org/t/ldap-active-directory-improvements/13094/2 "2022-06-27T16:26:21Z")

</div>

A post was merged into an existing topic: [LDAP connectivity with the openemr-6](https://community.open-emr.org/t/ldap-connectivity-with-the-openemr-6/17726/2)